CVE-2008-5964

EPSS 0.87%
Veröffentlicht 23.01.2009 19:00:05
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Impresscms ≫ Impresscms Version <= 1.0.3

Impresscms ≫ Impresscms Version1.0

Impresscms ≫ Impresscms Version1.0.1

Impresscms ≫ Impresscms Version1.0.2

Impresscms ≫ Impresscms Version1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.87%	0.731

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://osvdb.org/50413

http://secunia.com/advisories/32985

Vendor Advisory

http://sourceforge.net/forum/forum.php?forum_id=893767

http://wiki.impresscms.org/index.php?title=Change_Log#2008-12-2_:_1.1.1_RC

Vendor Advisory

http://www.securityfocus.com/archive/1/498734/100/0/threaded

http://www.securityfocus.com/archive/1/498885/100/0/threaded

http://www.securityfocus.com/bid/32495

https://exchange.xforce.ibmcloud.com/vulnerabilities/46989

https://nvd.nist.gov/vuln/detail/CVE-2008-5964

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5964

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5964

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-5964